if($username == $dbUserName && $password == $dbPassword) {
    $_SESSION['username'] = $username;
    $_SESSION['id'] = $userId;
    header('Location: user.php');
    }

else {
    echo "<b><i>Invalid credentials</i><b>";
}